CVE-2023-21218

CRITICAL

Android - Local Privilege Escalation via PMRChangeSparseMemOSMem Bounds Check

Title source: llm
STIX 2.1

Description

In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.0010
EPSS Percentile 28.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (1)
google/android
Published Dec 04, 2023
Tracked Since Feb 18, 2026